NAME

tos - Shorewall Type of Service rules file

SYNOPSIS

/etc/shorewall/tos

DESCRIPTION

This file defines rules for setting Type Of Service (TOS)
The columns in the file are as follows.
SOURCE - {zone[:address]|all|$FW} (Shorewall-shell)
Name of a zone declared in shorewall-zones[1](5), all or $FW.
If not all or $FW, may optionally be followed by ":" and an IP
address, a MAC address, a subnet specification or the name of an
interface.
Example: loc:192.168.2.3
MAC addresses must be prefixed with "~" and use "-" as a separator.
Example: ~00-A0-C9-15-39-78
SOURCE - {all|address]|all:address|$FW} (Shorewall-perl)
If all, may optionally be followed by ":" and an IP address, a MAC
address, a subnet specification or the name of an interface.
Example: all:192.168.2.3
MAC addresses must be prefixed with "~" and use "-" as a separator.
Example: ~00-A0-C9-15-39-78
DEST - {zone[:address]|all} (Shorewall-shell)
Name of a zone declared in shorewall-zones[1](5) or all.
If not all, may optionally be followed by ":" and an IP address or
a subnet specification
Example: loc:192.168.2.3
DEST - {all|address]|all:address} (Shorewall-perl)
Example: 192.168.2.3
PROTOCOL - proto-name-or-number
Protocol name or number.
SOURCEPORT(S) - {-|port|lowport:highport}
Source port or port range. If all ports, use "-".
DESTPORT(S) - {-|port|lowport:highport}
Destination port or port range. If all ports, use "-"
TOS - tos
Must be one of the following;
tos-minimize-delay (16)
tos-maximize-throughput (8)
tos-maximize-reliability (4)
tos-minimize-cost (2)
tos-normal-service (0)
MARK - [!]value[/mask][:C]
If you don´t want to define a test but need to specify anything in
the following columns, place a "-" in this field.
!
Inverts the test (not equal)
value
Value of the packet or connection mark.
mask
A mask to be applied to the mark before testing.
:C
Designates a connection mark. If omitted, the packet mark´s
value is tested. This option is only supported by
Shorewall-perl.